Re: [ADMIN] postgresql 8.3 logging user passwords in clear text

2010-08-24 Thread Tom Lane
Scott Marlowe writes: > On Tue, Aug 24, 2010 at 12:20 PM, Keith Pinnix wrote: >> The entries are from dblimk something like below: >>  SELECT * FROM dblink('dbname=XX  host=XX port=XXX  user=X >> password=XXX ', > You could set up those machines to connect via trust. But yeah, >

Re: [ADMIN] postgresql 8.3 logging user passwords in clear text

2010-08-24 Thread Scott Marlowe
On Tue, Aug 24, 2010 at 12:20 PM, Keith Pinnix wrote: > Scott: > > The entries are from dblimk something like below: > >  SELECT * FROM dblink('dbname=XX  host=XX port=XXX  user=X > password=XXX ', > > We use this feature quite a bit and this presents quite a security issue. > We a

Re: [ADMIN] postgresql 8.3 logging user passwords in clear text

2010-08-24 Thread Alvaro Herrera
Excerpts from Keith Pinnix's message of lun ago 23 19:47:53 -0400 2010: > All: > > I have a postgresql instance and I have noticed that it is logging the user > passwords in clear text in the postgresql.log. Is this configurable so that > it > retains the user info and commands but does not l

Re: [ADMIN] postgresql 8.3 logging user passwords in clear text

2010-08-23 Thread Scott Marlowe
On Mon, Aug 23, 2010 at 5:47 PM, Keith Pinnix wrote: > All: > > I have a postgresql instance and I have noticed that it is logging the user > passwords in clear text in the postgresql.log.   Is this configurable so > that it retains the user info and commands but does not log the password? Got so

[ADMIN] postgresql 8.3 logging user passwords in clear text

2010-08-23 Thread Keith Pinnix
All: I have a postgresql instance and I have noticed that it is logging the user passwords in clear text in the postgresql.log. Is this configurable so that it retains the user info and commands but does not log the password? Keith